IAPP
CIPM · Question #246
If your organization has a recurring issue with colleagues not reporting personal data breaches, all of the following are advisable to do EXCEPT?
The correct answer is D. Distribute a phishing exercise to all employees to test their ability to recognize a threat attempt. See the full explanation below for the reasoning.
Question
If your organization has a recurring issue with colleagues not reporting personal data breaches, all of the following are advisable to do EXCEPT?
Options
- AReview reporting activity on breaches to understand when incidents are being reported and when
- BImprove communication to reinforce to everyone that breaches must be reported and how they
- CProvide role-specific training to areas where breaches are happening so they are more aware.
- DDistribute a phishing exercise to all employees to test their ability to recognize a threat attempt.
How the community answered
(32 responses)- A16% (5)
- B3% (1)
- C9% (3)
- D72% (23)
Community Discussion
No community discussion yet for this question.